Privacy and cookie policy
This policy explains what personal information Eco Site Solutions collects through this website, why, how long we keep it and what your choices are. Last updated: 28 October 2026.
1. Who we are
The website ecositesolutions.co.uk is run by Eco Site Solutions Limited, trading as Eco Site Solutions (“we”, “us”). We are the “controller” of the personal information described here, which means we decide how and why it is used.
- Company number: 08142634, registered in England and Wales
- Address: 84 Cannon Leys, Chelmsford, Essex CM2 8PD
- Email: info@ecositesolutions.co.uk
- Phone: 01245 475565
If you have any question about this policy or how we use your information, please contact us using the details above.
2. What we collect and why
| What | Information | Why and our lawful basis |
|---|---|---|
| Contact form | Your name, email address, phone number and the message you write. | To reply to your enquiry and, if you ask, to prepare a quote or arrange work. Lawful basis: legitimate interests (running our business and answering enquiries) and taking steps at your request before a contract (UK GDPR Article 6(1)(f) and (b)). |
| Hosting and security | Your IP address, browser and device details, the pages requested and technical request logs. | To deliver the website, keep it secure and block attacks and abusive bots. Lawful basis: legitimate interests (a secure, working website). |
| Spam and bot check | Browser and connection signals checked by Cloudflare Turnstile when you use the contact form. | To tell real people from automated bots and protect the form. Lawful basis: legitimate interests (preventing spam and abuse). |
| Website analytics | Pages viewed, how you arrived, approximate location, device and browser type, and (only if you accept) an anonymous identifier stored in a cookie. | To understand how the site is used and improve it, and to build audiences for Google advertising. Lawful basis: your consent (UK GDPR Article 6(1)(a) and the Privacy and Electronic Communications Regulations). You can say no, and you can change your mind at any time. |
| Page-view and performance statistics | Which pages are viewed and how quickly they load (page load timings, browser and device type, referring site and approximate country), collected by Cloudflare Web Analytics without cookies. | To count visits and keep the site fast. It sets no cookies and does not use your IP address to identify or follow you. Lawful basis: legitimate interests (understanding site performance and traffic). |
| Calls and emails | Whatever you tell us when you phone or email us. | To respond to you and run our business. Lawful basis: legitimate interests, or taking steps at your request before a contract. |
3. The contact form
When you send a message through the form, it is passed to Cloudflare Email Sending, which emails it from website@ecositesolutions.co.uk to our inbox at info@ecositesolutions.co.uk. Your message is not stored on this website; it only exists in our email. We do not send what you type in the form to Google Analytics.
We only use your details to deal with your enquiry. We do not sell them or use them for unrelated marketing.
4. Cloudflare (hosting, security and bot checks)
This website is served by Cloudflare. Cloudflare screens every request, which means it processes visitors’ IP addresses and browser details, to deliver the pages quickly and to block attacks and malicious bots. It may set strictly necessary security cookies such as __cf_bm for this purpose.
We also use Cloudflare Web Analytics for simple page-view and performance statistics. It is cookie-free: it does not set or read cookies or use local storage, it does not fingerprint visitors, it is not used for advertising, and Cloudflare does not use your IP address to identify or track you across sites. Because it sets no cookies it runs whether or not you accept cookies in our cookie banner, and our lawful basis is legitimate interests. You can read more in Cloudflare’s Web Analytics documentation.
The contact form uses Cloudflare Turnstile, which checks signals from your browser to tell humans from bots. It is not used for tracking you or for advertising.
Some pages show a video from Vimeo. We load it in Vimeo’s “do not track” mode, which asks Vimeo not to track your viewing or set its own analytics or advertising cookies. Vimeo still receives your IP address and browser details when the video loads, and its Cloudflare protection may set strictly necessary security cookies (see the cookie table). Please see Vimeo’s privacy policy for how it handles that data.
5. Google Analytics, consent and advertising features
With your consent we use Google Analytics 4, a service provided by Google, to measure how the website is used. We use Google’s Consent Mode, so what happens depends on your choice in the cookie banner:
- Accept all: Google Analytics may set cookies and collect usage information about your visit, including an anonymous identifier. Because we have switched on Google signals and advertising features, Google may also use this information, together with data from people who are signed in to a Google account and have allowed ad personalisation, to report on audiences and to show relevant adverts. Advertising-related cookies and requests to Google advertising domains are only used after you accept.
- Reject all: no analytics or advertising cookies are set. Google may still receive anonymous, cookie-less pings (such as the page viewed and the time) that are not linked to an identifier on your device. Google uses these only for statistical modelling of overall traffic.
Google Analytics 4 does not log or store IP addresses. Your IP address is used briefly to work out your approximate location and is then discarded.
You can change your choice at any time using the button below or the “Cookie settings” link in the footer of every page. If you reject after accepting, we also remove the Google Analytics cookies we can see.
6. Cookies and similar technologies
Strictly necessary cookies do not need your consent. We only use other cookies if you accept them.
| Name | Set by | Purpose | Duration | Type |
|---|---|---|---|---|
_ga | Google Analytics | Tells one visitor from another (anonymous identifier) to measure visits. | 2 years | Analytics, consent needed |
_ga_GFXSQW114H | Google Analytics | Keeps the state of a visit (session) for this site’s measurement property. | 2 years | Analytics, consent needed |
| Google advertising cookies | Google (for example on google.com and doubleclick.net) | Advertising audiences and measurement when Google signals is on. | Set by Google, up to 2 years | Advertising, consent needed |
ww-consent | This website (browser local storage, not a cookie) | Remembers your cookie choice (“granted” or “denied”) so we do not ask on every page. | Until you clear your browser data or change your choice | Strictly necessary |
__cf_bm | Cloudflare | Helps Cloudflare identify and block bots to protect the site. | 30 minutes | Strictly necessary |
__cf_bm, cf_clearance and __cf_ob | Cloudflare, on vimeo.com (when a page shows a Vimeo video) | Security protection for Vimeo’s video player, to block bots and attacks. The video is loaded in “do not track” mode, so Vimeo is asked not to set its own tracking or analytics cookies. | 30 minutes (__cf_bm), the browser session (__cf_ob), up to 1 year (cf_clearance) | Strictly necessary |
cf_clearance and similar | Cloudflare Turnstile | May be set if a security check is shown, so you are not asked to prove you are human again straight away. | Up to 1 year, depending on the check | Strictly necessary |
You can also block or delete cookies in your browser settings. Doing so may stop parts of the site working.
7. Who we share information with and transfers abroad
We use these providers to run the website. They process information on our behalf or, for Google Analytics, under their own terms for the parts they control:
- Cloudflare, Inc. (hosting, security, Web Analytics, Turnstile, Email Sending).
- Vimeo (embedded content).
- Google (Google Analytics and Google advertising features).
- Our email and IT providers, so that we can read and answer your messages.
Some of these providers are based in, or process information in, the United States and other countries outside the UK. Where this happens we rely on a recognised safeguard, such as the UK–US data bridge (for certified providers), a UK adequacy decision, or the UK International Data Transfer Agreement or Addendum with standard contractual clauses. We do not otherwise sell or share your personal information.
8. How long we keep information
- Enquiries sent through the form (held in our email): 12 months
- Google Analytics data: 14 months, then it is deleted automatically by Google.
- Cloudflare Web Analytics: Cloudflare keeps detailed statistics for about 7 days, then only aggregated figures that do not identify you.
- Cloudflare security logs: kept by Cloudflare for a short period under its own retention settings.
- Your cookie choice: stored in your browser until you clear it.
9. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information, or restrict how we use it, in certain circumstances;
- object to us using your information based on legitimate interests;
- ask for your information in a portable format, where it applies; and
- withdraw your consent at any time (for example to analytics), without affecting what we did before you withdrew it.
To use any of these rights, contact us using the details in section 1. We will reply within one month.
10. Complaints
If you are unhappy with how we have used your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, helpline 0303 123 1113.
11. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.